Lacework Mcp Server MCP Server

An MCP (Model Context Protocol) server built with FastMCP that exposes Lacework API v2 alert operations as tools for AI agents and LLM integrations.

Local serverstdio

What is the Lacework Mcp Server?

Lacework Mcp Server is an MCP project maintained in the shashwat-sec/lacework-mcp-server repository. The maintainer describes its purpose as “An MCP (Model Context Protocol) server built with FastMCP that exposes Lacework API v2 alert operations as tools for AI agents and LLM integrations”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using /path/to/lacework_mcp_server/.venv/bin/python. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
list_alerts	List alerts within an optional time range (supports relative times like 2h, last 2 hours)
search_alerts	Search alerts with filters (severity, status, alert type) and flexible time inputs (30m, last 2 hours, 2024-06-01)
get_alert_details	Get detailed info for a specific alert (Details, Investigation, Events, RelatedAlerts, Integrations, Timeline, ObservationTimeline)
get_alert_timeline	Shortcut – get the timeline for an alert
get_alert_investigation	Shortcut – get investigation details for an alert
get_alert_entities	List entities (machines, IPs) associated with an alert
get_alert_entity_details	Get enriched context for a specific entity (VirusTotal, network activity, etc.)
post_alert_comment	Post a comment on an alert's timeline
close_alert	Close an alert with a reason code

How to install the Lacework Mcp Server

{
  "mcpServers": {
    "lacework": {
      "command": "/path/to/lacework_mcp_server/.venv/bin/python",
      "args": [
        "/path/to/lacework_mcp_server/lacework_mcp_server.py"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.